$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft File: 8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json) Hash identifier: zTuY7Cv/xSHmi94PdHruLXit6FmvIRVqLyMrj/+Meq0= Subject key identifier: 62:12:3F:C0:B8:17:D5:78:A8:D8:4B:6B:CC:23:30:04:A3:48:E7:AD Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 Certificate issuer: /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Certificate serial: 2563 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft Manifest number: 254C Signing time: Sat 18 May 2024 16:00:25 +0000 Manifest this update: Sat 18 May 2024 16:00:24 +0000 Manifest next update: Sat 25 May 2024 16:00:24 +0000 Files and hashes: 1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: D0njpL51bKAdHmqU1ZiV29g7AaQ9ZlZzyhROyimqzwg=) 2: 26BB8306A4B111EC86D73A56C4F9AE02.roa (hash: Uki4zZBq+AXoZS1WsNdomdB56dr+Us9kfJZonwp4fTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9571 (0x2563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Validity Not Before: May 18 16:00:24 2024 GMT Not After : May 25 16:00:24 2024 GMT Subject: CN=6648d099-4049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:34:a0:4f:72:d8:5a:6c:24:8f:96:db:8e: b2:c3:3d:bb:3a:0d:8e:29:86:4e:a1:4c:7f:00:1c: ca:2c:9f:94:fe:1d:b5:e4:0a:7c:d5:c5:75:63:2b: bf:41:8a:77:6c:04:f8:e9:6c:bb:b0:d7:fb:18:45: 96:fe:24:2d:d7:a1:96:b1:66:01:7c:62:fc:15:9d: 16:60:43:b3:1d:c7:53:ef:f3:cf:a4:86:6b:12:c7: 3b:de:a6:01:2c:de:b4:95:ba:d1:df:8f:f2:cb:a5: d8:ee:4d:91:1a:36:ea:a1:27:2c:7a:73:93:4e:9c: 7e:df:11:35:e3:45:05:60:1c:b4:f8:7f:2f:fd:a9: e1:d2:26:cc:18:1c:46:85:c5:bc:8d:d5:57:1a:72: 6c:bd:c0:15:c8:64:c9:5e:8b:a1:b4:28:c9:ae:b0: 9e:eb:e4:1f:77:d4:e4:e6:29:d4:6c:ec:49:fe:74: c4:67:eb:ae:18:aa:96:fb:67:21:4c:cd:55:f2:3a: 99:6a:89:01:a3:0a:c2:e3:46:e4:18:dd:c1:b3:8b: c5:73:22:2f:30:32:0f:52:e1:f9:e5:b0:04:fd:52: 61:1e:02:c3:e7:e5:34:97:fd:6e:d9:61:f9:3c:ff: 30:0a:f3:14:50:63:c5:fa:a6:6c:3d:85:85:58:1e: bd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:12:3F:C0:B8:17:D5:78:A8:D8:4B:6B:CC:23:30:04:A3:48:E7:AD X509v3 Authority Key Identifier: keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e9:78:5a:77:b3:48:78:2a:c6:0a:5d:41:96:c3:b3:f2:93: e9:d3:b7:5d:d8:06:e5:b8:46:74:bb:d4:3b:81:fb:1b:81:25: f0:13:62:d1:da:86:b2:ce:72:26:09:fd:8e:91:f5:7a:aa:20: e2:f7:2e:df:79:28:04:df:bd:a8:5c:b1:ea:06:4d:c7:b3:63: ee:d0:74:72:45:25:c2:b0:f7:9f:6a:ad:8f:53:c4:d8:bf:ef: 12:ef:be:44:0b:80:60:11:9e:92:ac:49:51:82:b8:e3:c8:aa: fe:13:49:7e:65:81:42:15:3f:50:3f:5a:e3:ad:34:17:43:1c: c7:9c:a9:6a:e1:0b:99:4f:8e:00:18:e7:84:77:bf:31:65:d9: 0a:2a:48:35:df:bb:cf:95:1a:32:ba:f6:c5:11:3f:f4:82:de: 65:02:da:fd:1e:1a:7e:21:33:cd:ba:0a:c1:25:8c:fe:f1:85: f1:f1:47:33:fe:49:64:22:a4:3c:9c:9d:6d:be:a2:d2:7f:b5: 50:a6:bd:40:c4:6f:31:38:42:19:09:ab:29:93:eb:71:ba:3d: d4:20:aa:7f:ef:f2:d8:fb:c8:e4:8d:59:e7:4f:fc:90:4f:51: 51:28:3a:8a:b2:ca:3e:f9:98:9b:6f:28:49:fb:89:06:45:b9: d9:79:c5:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1NTgxMTAvBgNVBAUTKEYxODQ5QTY0OEQ5MkQ0NTc4OTBENDdDNzIyODZDREE5 NjgzQTNBRTMwHhcNMjQwNTE4MTYwMDI0WhcNMjQwNTI1MTYwMDI0WjAYMRYwFAYD VQQDEw02NjQ4ZDA5OS00MDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJg0oE9y2FpsJI+W246ywz27Og2OKYZOoUx/ABzKLJ+U/h215Ap81cV1Yyu/ QYp3bAT46Wy7sNf7GEWW/iQt16GWsWYBfGL8FZ0WYEOzHcdT7/PPpIZrEsc73qYB LN60lbrR34/yy6XY7k2RGjbqoScsenOTTpx+3xE140UFYBy0+H8v/anh0ibMGBxG hcW8jdVXGnJsvcAVyGTJXouhtCjJrrCe6+Qfd9Tk5inUbOxJ/nTEZ+uuGKqW+2ch TM1V8jqZaokBowrC40bkGN3Bs4vFcyIvMDIPUuH55bAE/VJhHgLD5+U0l/1u2WH5 PP8wCvMUUGPF+qZsPYWFWB69AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGISP8C4 F9V4qNhLa8wjMASjSOetMB8GA1UdIwQYMBaAFPGEmmSNktRXiQ1HxyKGzaloOjrj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODU1OC8xRkEzREFCOEZB QjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFGZUpEVWZISW9iTnFXZzZP dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZU2FaSTJTMUZlSkRVZkhJb2JOcVdnNk91TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODU1OC8xRkEzREFCOEZBQjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFG ZUpEVWZISW9iTnFXZzZPdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+6Xhad7NIeCrGCl1BlsOz8pPp07dd2AbluEZ0u9Q7gfsbgSXwE2LR 2oayznImCf2OkfV6qiDi9y7feSgE372oXLHqBk3Hs2Pu0HRyRSXCsPefaq2PU8TY v+8S775EC4BgEZ6SrElRgrjjyKr+E0l+ZYFCFT9QP1rjrTQXQxzHnKlq4QuZT44A GOeEd78xZdkKKkg137vPlRoyuvbFET/0gt5lAtr9Hhp+ITPNugrBJYz+8YXx8Ucz /klkIqQ8nJ1tvqLSf7VQpr1AxG8xOEIZCaspk+txuj3UIKp/7/LY+8jkjVnnT/yQ T1FRKDqKsso++ZibbyhJ+4kGRbnZecVi -----END CERTIFICATE-----Generated at Sat May 18 17:20:04 2024 by rpki-client on console-ams.rpki-client.org